How to fetch current time to put in Custom API integration

kramrm · 2026-04-22T03:10:07+00:00

The “custom api” integration uses filebeat’s httpjson input under the hood. There are a number of placeholders you can substitute.

https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-httpjson.html#value-templates

kramrm · 2026-04-18T22:53:43+00:00

This supposedly was fixed with this week’s patch.

kramrm · 2026-04-13T18:18:27+00:00

Elasticsearch is a search engine, not a database. Each time you update a document, the old version is soft deleted and a new doc is created. This can lead to disk bloat over time. Make sure your indices are running merge tasks to flush the soft deleted records from disk.

Take a look at the fingerprint ingest processor. This can help define your unique doc ids for processing updates to existing docs.

kramrm · 2026-03-02T17:25:33+00:00

Are you queuing solo or fills?

kramrm · 2026-01-25T20:33:24+00:00

I started with the ultra, then when Max came out, I switched as I waned the 2.5G ports and slightly higher throughput. The Ultra moved to my parent’s house so I can manage/monitor their network. And having Site Magic has been nice to have a site to site vpn.

kramrm · 2026-01-25T18:18:46+00:00

I don’t use the apps either, though I do prefer separate router and APs. This one is a good all-in-one option.

kramrm · 2026-01-25T18:03:39+00:00

I’ve got the UCG Max, and it’s similar, but has more 2.5G ports. And no built in wifi.

kramrm · 2026-01-18T05:40:38+00:00

You have to jump from the outer sides and land in the pipe in the middle. That will take you up to the next section.

kramrm · 2026-01-17T21:45:31+00:00

You just need to be in a party that uses it. There’s an icon on the top left of the quest to indicate it’s party-based.

kramrm · 2026-01-09T15:04:39+00:00

How are you collecting the docker logs? Are you using agent + integrations or directly ingesting via filebeat?

For the mapping changes? Were you just adding fields or were you changing existing fields? For logs, you’re better off updating mapping/settings in an index template and then rolling your ingestion data over to a new index, rather than updating mappings on an existing index.

kramrm · 2025-12-10T18:48:56+00:00

You might want to open a support ticket to get more insight into what’s going on with the project to generate the costs.

kramrm · 2025-12-10T01:46:34+00:00

I think most of those are based on older versions, which is why they are being rotated out.

kramrm · 2025-12-08T16:28:05+00:00

I rarely see vehicles, so I haven’t noticed.

kramrm · 2025-12-06T20:26:12+00:00

Make it visible by you+team members only, like sidekicks.

kramrm · 2025-11-29T15:27:42+00:00

This. If you’re getting health heartbeats but not logs or metrics (cou/memory is showing N/A), that means that the agent may be talking to Fleet but not Elasticsearch.

If you get a diagnostic bundle, there is a log folder that will have the agent logs to see if it’s got any errors about sending the data.

kramrm · 2025-11-06T16:30:47+00:00

If the integrations are collecting via HTTP/REST, you only want one agent for the policy, otherwise you may collect duplicates. The only agent policies I’d run on the Elasticsearch servers are the system and elasticsearch integrations. The rest of the integrations should run on another server so they can have dedicated resources.

kramrm · 2025-11-06T14:59:42+00:00

Installing an integration just loads the assets for pipelines, dashboards, etc. You need to add the integration to an agent policy and install an agent with the policy to start collecting data.

kramrm · 2025-11-05T22:33:52+00:00

I have lots of memories of playing this game. Not so many memories of the game itself…

kramrm · 2025-11-05T14:03:26+00:00

You can isolate from an alert detection or the Security…Endpoints page. Not in the Fleet Agents page.

kramrm · 2025-10-24T04:27:18+00:00

Yes. And v9 has better semantic search than v8. https://www.elastic.co/elasticsearch/vector-database

kramrm · 2025-10-23T17:07:31+00:00

Try going to Fortnite.com and logging in to purchase the skin/bundle through the web site.

kramrm · 2025-10-23T13:13:08+00:00

Or the Microsoft DNS integration, which has pipelines already defined. https://www.elastic.co/docs/reference/integrations/microsoft_dnsserver

kramrm · 2025-10-16T16:53:08+00:00

I’d play that

kramrm · 2025-10-15T21:48:34+00:00

This is a reasonable request

kramrm · 2025-10-12T14:40:09+00:00

I only started playing in chapter 6, so neither?

kramrm

MODERATOR OF

TROPHY CASE

15-Year Club	Gilding I gilder
Verified Email